Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: f4r4pn8xV0zUpFQQJO2f9RouFK1SIWm3gt30MqEI3jA=
Subject key identifier: 8C:73:84:58:1B:3B:7E:FE:02:11:F6:C7:05:94:08:72:BA:44:79:77
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0196759E8CCA0466E379BB7A3CB3E596E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:47 +0000
Manifest this update: Sun 27 Apr 2025 05:00:47 +0000
Manifest next update: Mon 28 Apr 2025 05:00:47 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: m6+ACzAHdL1RBHI7CM+Nv157ry4srogIF0nU7GKxIfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8c:ca:04:66:e3:79:bb:7a:3c:b3:e5:96:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Apr 27 05:00:47 2025 GMT
Not After : Apr 28 05:00:47 2025 GMT
Subject: CN=8c7384581b3b7efe0211f6c705940872ba447977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:23:e9:df:cb:fb:ac:80:f6:66:85:6b:5d:
af:74:81:79:31:8c:bf:ee:7f:52:dc:90:64:6d:00:
1a:15:19:ee:cb:51:02:c5:7f:79:32:72:c9:a7:0a:
14:ae:e9:5c:6a:22:6b:c6:be:15:2b:44:1d:ad:46:
32:74:98:bf:35:6c:bc:1a:92:16:6c:93:59:6d:b9:
70:27:6a:14:29:70:df:55:6e:76:ea:f0:aa:e6:f2:
54:68:b4:fa:7d:03:9d:f6:49:51:8d:bb:e1:e2:89:
75:b4:5a:c8:6f:94:ad:17:38:40:d8:86:ac:94:ce:
c7:5c:71:72:7d:c8:71:8f:04:7b:f3:22:03:0d:f7:
88:5b:2d:72:73:b7:7a:8c:a2:73:47:40:d5:7b:b7:
9c:e8:4a:68:62:4c:0d:ef:48:ac:66:f1:cc:6a:43:
e3:a7:ae:77:06:c0:96:cd:db:20:5c:1d:71:96:b6:
66:3d:69:55:32:26:e5:28:b5:d5:4f:9c:69:96:cb:
0e:8b:df:61:92:f1:98:76:5c:e7:e8:d4:56:b7:cc:
31:06:c1:71:4f:08:ce:86:78:4b:8b:17:95:49:4c:
25:da:76:0a:83:c9:c2:46:54:a3:f6:53:d7:08:37:
c1:41:2c:c1:52:f0:c6:ea:21:fd:9e:9a:eb:71:98:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:84:58:1B:3B:7E:FE:02:11:F6:C7:05:94:08:72:BA:44:79:77
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:36:66:85:ff:e0:15:78:b5:1a:47:b2:19:92:91:22:59:aa:
b4:8c:ca:12:c8:0a:27:3c:8e:81:d8:53:c1:d1:a5:0a:23:13:
5b:a8:17:3c:11:5e:bb:5a:5c:bd:7a:57:cc:b1:68:42:7f:5f:
db:58:5b:7f:28:37:ac:96:48:19:1f:50:7c:54:e0:23:bd:7b:
22:e3:15:59:a8:a6:d5:8c:a9:42:04:6a:17:f5:87:d9:b9:78:
22:be:f2:05:fa:c3:50:c7:c8:ad:78:10:5e:0f:66:66:f2:f0:
e3:73:52:6c:19:20:3f:e8:22:b6:ae:4d:40:db:b3:db:1d:31:
29:43:14:d3:5f:81:46:06:23:47:db:d3:eb:82:27:ce:6b:c9:
f3:7b:b5:87:be:df:73:7c:ce:6e:b6:f4:9f:48:58:f8:a4:a3:
4d:f2:ce:07:68:53:66:8c:db:80:a7:20:1f:7c:2c:4f:aa:44:
11:1d:87:80:c5:c9:90:4c:e7:70:84:8b:a8:de:a7:59:37:d0:
84:cb:a9:c7:6e:64:80:0d:23:ed:0b:56:ea:6f:49:4e:a8:4e:
41:ef:cc:f4:c2:57:74:68:c0:f8:b5:8f:34:9c:0e:fc:7c:88:
2d:47:25:e9:b5:68:a9:f0:5f:9f:da:35:fe:e7:84:01:ea:40:
bc:0f:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:40:45 2025 by rpki-client